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DETAILED ACTION 



Specification 

The disclosure is objected to because of the following informalities: 
On page 2, line 20, . . person in procession of the key. . ." appears to be a 
typographical error 

Appropriate correction is required. 



Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in a patent granted on an application for patent by another filed in the 
United States before the Invention thereof by the applicant for patent, or on an international application 
by another who has fulfilled the requirements of paragraphs (1 ), (2), and (4) of section 371 (c) of this 
title before the invention thereof by the applicant for patent. 

The changes made to 35 U.S.C. 102(e) by the American Inventors Protection Act 
of 1999 (AlPA) and the Intellectual Property and High Technology Technical 
Amendments Act of 2002 do not apply when the reference is a U.S. patent resulting 
directly or indirectly from an international application filed before November 29, 2000. 
Therefore, the prior art date of the reference is determined under 35 U.S.C. 102(e) prior 
to the amendment by the AlPA (pre-AlPA 35 U.S.C. 102(e)). 
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Claims 1-3, 5-6, 14, 20, 24-27, 30, 31, 35, 37, 39-45, 47 and 48 are rejected 
under 35 U.S.C. 102(e) as being anticipated by U.S. patent 6,219,439 granted to 
Burger. 

Regarding claim 1, Burger meets the claimed limitations as follows: 
"A method of authenticating a subject, comprising: using one or a plurality of biometric 
measurements for authentication without any sharing of the subject's biometric data." 
see column 5, line 66 to column 6, line 8 and column 6, lines 63-67. 

Regarding claim 2, Burger meets the claimed limitations as follows: 
"The method according to claim 1 , further comprising: storing said biometric data in an 
individual unit, said individual unit belonging to said subject." see column 6, lines 39-42. 

Regarding claim 3, Burger meets the claimed limitations as follows: 
"The method according to claim 2, wherein said individual unit is portable for being 
carried by said subject." see column 4, lines 34-42. 

Regarding claim 5, Burger meets the claimed limitations as follows: 
"The method according to claim 2, wherein said individual unit comprises one of a smart 
card, a personal area network (PAN) tool, and an apparatus linked to a network." see 
column 6, lines 14-34. 

Regarding claim 6, Burger meets the claimed limitations as follows: 
"The method according to claim 1 , further comprising: 

after said authentication, selectively obtaining access to any of a location, a service, and 
an option in a service by said subject." see column 6, lines 39-51 and column 8, lines 
16-34. 



Application/Control Number: 09/372. 1 70 Page 4 

Art Unit: 2134 

Regarding claim 14, Burger meets the claimed limitations as follows: 
"A method of authenticating a characteristic of a subject, without compromising privacy 
of the subject, comprising: using at least one of a plurality of authentication methods 
including personal information of the subject, a biometric of the subject, a password, a 
personal identification number (PIN) and a secured component; and simultaneously with 
said using, said subject maintaining confidentiality of authentication information and 
withholding said authentication information from the other party." see column 5, line 66 
to column 6, line 8 and column 6, lines 63-67. 

Regarding claim 20, Burger meets the claimed limitations as follows: 
"A method for secure authentication of a subject, comprising: selectively requesting any 
of a password and a knowledge-based information from said subject; and 
simultaneously with said selectively requesting, interrogating biometric information of 
the subject, said biometric information being carried by said subject." see column 5, line 
66 to column 6, line 8 and column 6, lines 63-67. 

Regarding claim 24, Burger meets the claimed limitations as follows: 
"The method according to claim 20, wherein a device is carried by the subject to be 
authorized to perform a task, wherein at a moment of authorization, said device is 
presented to a reader of an authorizing machine of an entity seeking authentication, 
which prompts said device for a password for authorization to be given, and wherein 
said device reads a biometric of said subject using a sensor included in the device and 
computes the password." see column 5, lines 42-65. 

Regarding claim 25, Burger meets the claimed limitations as follows: 
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"The method according to claim 24, wherein said device allows the password to be read 
by the authorizing machine." see column 5, lines 42-65. 

Regarding claim 26, Burger meets the claimed limitations as follows: 
"The method according to claim 25, wherein said password is read in a contacting 
manner." see column 5, lines 50-55. 

Regarding claim 27, Burger meets the claimed limitations as follows: 
"The method according to claim 25, wherein said password is read in a contact-free 
manner." see column 5, lines 50-55. 

Regarding claim 30, Burger meets the claimed limitations as follows: 
"The method according to claim 24, further comprising: storing on the device information 
regarding a previous authentication including a biometric-print of the subject." see 
column 4, lines 5-13 and column 6, lines 39-47. 

Regarding claim 31, Burger meets the claimed limitations as follows: 
"The method according to claim 20, further comprising: encrypting a biometric-print 
using the subject's biometric and personal knowledge onto a device carried by said 
subject." see column 4, lines 5-13 and column 7, lines 1-3. 

Regarding claim 35, Burger meets the claimed limitations as follows: 
"An apparatus for secure authentication, without compromising privacy of a subject, 
comprising: a reader, associated with the subject, for reading a specified biometric of 
said subject; and a password generator for producing a password needed based on 
said biometric." see column 5, line 66 to column 6, line 8 and column 6, lines 63-67. 

Regarding claim 37, Burger meets the claimed limitations as follows: 
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"An apparatus for secure authentication, comprising: means, associated with a subject, 
for reading a specified biometric of said subject; and means for producing a password 
needed based on said biometric, without providing access to said biometric by anyone 
other than said subject." see column 5. line 66 to column 6, line 8 and column 6, lines 
63-67. 

Regarding claim 39, Burger meets the claimed limitations as follows: 
"A method of identifying a subject, comprising: using one or a plurality of biometric 
measurements for identification without any sharing of the subject's biometric data." see 
column 5, line 42 to column 6, line 8 and column 6, lines 63-67. 

Regarding claim 40, Burger meets the claimed limitations as follows: 
"The method of claim 39, wherein a subject's identity is determined locally, under the 
subject's control, by having the subject provide at least one of a user ID and by 
biometric identification of the subject among enrolled authorized subjects, and wherein 
said identification produces a set of N best matches for N subsets, and an index formed 
by concatenation of the N indices uniquely identifies the subject." see column 5, lines 
42-63. 

Regarding claim 41, Burger meets the claimed limitations as follows: 
"A method for identification of a subject, comprising: selectively requesting any of a 
password and a knowledge-based information from said subject; and simultaneously 
with said selectively requesting, interrogating biometric information of the subject, said 
biometric information being carried by said subject." see column 5, line 42 to column 6, 
line 8 and column 6, lines 63-67. 
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Regarding claim 42, Burger meets the claimed limitations as follows: 
"The method of claim 41, wherein a subject's identity is determined locally, under the 
subject's control, by having the subject provide at least one of a user ID and by 
biometric identification of the subject among enrolled authorized subjects, and wherein 
said identification produces a set of N best matches for N subsets, and an index formed 
by concatenation of the N indices uniquely identifies the subject." see column 5, lines 



Regarding claim 43, Burger meets the claimed limitations as follows: 
"An apparatus for identification of a subject, comprising: a reader, associated with the 
subject, for reading a specified biometric of said subject; and a password generator for 
producing a password needed based on said biometric." see column 5, line 66 to 
column 6, line 8 and column 6, lines 63-67. 

Regarding claim 44, Burger meets the claimed limitations as follows: 
"The apparatus according to claim 43, further comprising: means for storing data of said 
biometric in an individual unit, said individual unit belonging to said subject." see column 
6, lines 39-42. 

Regarding claim 45, Burger meets the claimed limitations as follows: 
"The apparatus according to claim 44, wherein said individual unit is portable for being 
carried by said subject." see column 4, lines 34-42. 

Regarding claim 47, Burger meets the claimed limitations as follows: 



42-63. 
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"The apparatus according to claim 44, wherein said individual unit comprises one of a 
smart card, a personal area network (PAN) tool, and an apparatus linked to a network." 
see column 6, lines 14-34. 

Regarding claim 48, Burger meets the claimed limitations as follows: 
'The apparatus according to claim 44, wherein a subject's identity is determined locally, 
under the subject's control, by having the subject provide at least one of a user ID and 
by biometric identification of the subject among enrolled authorized subjects being read 
by said reader, and wherein said identification produces a set of N best matches for N 
subsets, and an index formed by concatenation of the N indices uniquely identifies the 
subject." see column 5, lines 42-63. 

Claims 1-2, 4, 14, 19-23, 28-29, 35-44, 46 and 48 are rejected under 35 
U.S.C. 102(e) as being anticipated by U.S. patent 6,038,315 granted to Strait et al. 

Regarding claim 1, Strait meets the claimed limitations as follows: 
"A method of authenticating a subject, comprising: using one or a plurality of biometric 
measurements for authentication without any sharing of the subject's biometric data." 
see column 2, lines 53-56; column 3, lines 44-64 and column 5, line 47 to column 6, line 
11. 

Regarding claim 2, Strait meets the claimed limitations as follows: 
"The method according to claim 1, further comprising: storing said biometric data in an 
individual unit, said individual unit belonging to said subject." see column 3, lines 47-55 ( 
. . . database . . .). 
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Regarding claim 4, Strait meets the claimed limitations as follows: 
"The method according to claim 2, wherein said individual unit is non-portable." see 
column 3, lines 47-55 and Figure 2. 

Regarding claim 14, Strait meets the claimed limitations as follows: 
"A method of authenticating a characteristic of a subject, without compromising privacy 
of the subject, comprising: using at least one of a plurality of authentication methods 
including personal information of the subject, a biometric of the subject, a password, a 
personal identification number (PIN) and a secured component; and simultaneously with 
said using, said subject maintaining confidentiality of authentication information and 
withholding said authentication information from the other party." see column 2, lines 
53-56; column 3, lines 44-64 and column 5, line 47 to column 6, line 1 1 . 

Regarding claim 19, Strait meets the claimed limitations as follows: 
"The method according to claim 14, further comprising: selectively completing the 
authentication with a remote service using a communication port and protocol." see 
column 6, lines 36-46. 

Regarding claim 20, Strait meets the claimed limitations as follows: 
"A method for secure authentication of a subject, comprising: selectively requesting any 
of a password and a knowledge-based information from said subject; and 
simultaneously with said selectively requesting, interrogating biometric information of 
the subject, said biometric information being carried by said subject." see column 2, 
lines 53-56; column 3, lines 44-64 and column 5, line 47 to column 6, line 1 1 . 

Regarding claim 21, Strait meets the claimed limitations as follows: 
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"The method according to claim 20, further comprising: using said biometric information 
to generate said password." see abstract. 

Regarding claim 22, Strait meets the claimed limitations as follows: 
"The method according to claim 20, further comprising: performing biometric data 
verification by a device associated with said subject, wherein said biometric data 
verification activates a password controlled authentication mechanism which transfers 
information, but which withholds sufficient information so that the biometric is not 
revealed, to a party requiring authentication." see column 2, lines 53-56; column 3, lines 
44-64 and column 5, line 47 to column 6, line 1 1 . 

Regarding claim 23, Strait meets the claimed limitations as follows: 
"The method according to claim 21, wherein obtaining said password is performed by 
using at least one of an encryption and secure hashing." see column 2, lines 53-56 and 
column 5, line 37 to column 6, line 35. 

Regarding claim 28, Strait meets the claimed limitations as follows: 
"The method according to claim 24, further comprising: using one of a hashing and a 
mapping technique, which is stable with respect to variations of the biometric extracted, 
said using including mapping regions of a biometric-print space, to the password having 
been computed." see column 3, lines 5-64 and Figure 2. 

Regarding claim 29, Strait meets the claimed limitations as follows: 
"The method according to claim 28, wherein said using includes: measuring a 
biometric-print of the subject by ranking biometric prints of N subsets of M biometrics. 
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wherein an index of a top ranking of each of the N subsets is used in computing the 
password," see column 3, lines 5-64 and Figure 2. 

Regarding claim 35, Strait meets the claimed limitations as follows: ' 
"An apparatus for secure authentication, without compromising privacy of a subject, 
comprising: a reader, associated with the subject, for reading a specified biometric of 
said subject; and a password generator for producing a password needed based on 
said biometric." see column 2, lines 53-56; column 3, lines 44-64 and column 5, line 47 
to column 6, line 11. 

Regarding claim 36, Strait meets the claimed limitations as follows: 
"The apparatus according to claim 35, wherein said password generator includes an 
encryption device using at least one of encryption and secure hashing." see column 2, 
lines 53-56 and column 5, line 37 to column 6, line 35. 

Regarding claim 37, Strait meets the claimed limitations as follows: 
"An apparatus for secure authentication, comprising: means, associated with a subject, 
for reading a specified biometric of said subject; and means for producing a password 
needed based on said biometric, without providing access to said biometric by anyone 
other than said subject." see column 2, lines 53-56; column 3, lines 44-64 and column 5, 
line 47 to column 6, line 1 1 . 

Regarding claim 38, Strait meets the claimed limitations as follows: 
"The apparatus according to claim 37, wherein said means for producing said password 
includes an encryption device using at least one of encryption and secure hashing." see 
column 2, lines 53-56 and column 5, line 37 to column 6, line 35. 
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Regarding claim 39, Strait meets the claimed limitations as follows: 
"A method of identifying a subject, comprising: using one or a plurality of biometric 
measurements for identification without any sharing of the subject's biometric data." see 
column 2, lines 53-56; column 3, lines 44-64 and column 5, line 47 to column 6, line 11. 

Regarding claim 40, Strait meets the claimed limitations as follows: 
"The method of claim 39, wherein a subject's identity is determined locally, under the 
subject's control, by having the subject provide at least one of a user ID and by 
biometric identification of the subject among enrolled authorized subjects, and wherein 
said identification produces a set of N best matches for N subsets, and an index formed 
by concatenation of the N indices uniquely identifies the subject." see column 3, lines 5- 
64 and Figure 2. 

Regarding claim 41, Strait meets the claimed limitations as follows: 
"A method for identification of a subject, comprising: selectively requesting any of a 
password and a knowledge-based information from said subject; and simultaneously 
with said selectively requesting, interrogating biometric information of the subject, said 
biometric information being carried by said subject." see column 2, lines 53-56; column 
3, lines 44-64 and column 5, line 47 to column 6, line 1 1 . 

Regarding claim 42, Strait meets the claimed limitations as follows: 
"The method of claim 41 , wherein a subject's identity is determined locally, under the 
subject's control, by having the subject provide at least one of a user ID and by 
biometric identification of the subject among enrolled authorized subjects, and wherein 
said identification produces a set of N best matches for N subsets, and an index formed 
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by concatenation of the N indices uniquely identifies the subject." see column 3, lines 5- 
64 and Figure 2. 

Regarding claim 43, Strait meets the claimed limitations as follows: 
"An apparatus for identification of a subject, comprising: a reader, associated with the 
subject, for reading a specified biometric of said subject; and a password generator for 
producing a password needed based on said biometric." see column 2, lines 53-56; 
column 3, lines 44-64 and column 5, line 47 to column 6, line 1 1 . 

Regarding claim 44, Burger meets the claimed limitations as follows: 
"The apparatus according to claim 43, further comprising: means for storing data of said 
biometric in an individual unit, said individual unit belonging to said subject." see column 
3, lines 47-55 ( . . . database . . ,). 

Regarding claim 46, Strait meets the claimed limitations as follows: 
'The method according to claim 2, wherein said individual unit is non-portable" see 
column 3, lines 47-55 and Figure 2. 

Regarding claim 48, Burger meets the claimed limitations as follows: 
"The apparatus according to claim 44, wherein a subject's identity is determined locally, 
under the subject's control, by having the subject provide at least one of a user ID and 
by biometric identification of the subject among enrolled authorized subjects being read 
by said reader, and wherein said identification produces a set of N best matches for N 
subsets, and an index formed by concatenation of the N indices uniquely identifies the 
subject." see column 3, lines 5-64 and Figure 2. 
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Allowable Subject Matter 

Claims 7-13, 15-18, and 32-34 are objected to as being dependent upon a 
rejected base claim, but would be allowable if rewritten in independent form including all 
of the limitations of the base claim and any intervening claims. 

The following is a statement of reasons for the indication of allowable subject 

matter: 

With respect to claims 7-8, 12-13, and 15-18, the cited prior art fails to specifically teach 
generating at least one of a password and another authentication procedure based on 
biometric authentication locally under the subject's control. 

With respect to claims 9-1 1 , the cited prior art fails to specifically teach generating at 

least one of a password and another authentication procedure based on at least one 

biometric feature extracted locally under the subject's control. 

With respect to claims 27-, the cited prior art fails to specifically teach selectively 

completing the authentication with a remote service using a communication port and 

protocol. 

With respect to claims 32 and 33, the cited prior art fails to specifically teach providing a 
unique non-duplicable authentication mechanism on a device associated with said 
subject, said authentication mechanism being constructed so as to be completely 
independent of the biometric, wherein said authentication mechanism is prevented from 
accessing the biometric itself. 

With respect to claim 34, the cited prior art fails to specifically teach biometric 
information for a plurality of subjects is stored in a device associated with the subject. 
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Conclusion 

The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

A Glass et al (6,332,193) discloses a method for securely authenticating 
biometric data over a network. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Matthew B Smithers whose telephone number is (703) 
308-9293. The examiner can normally be reached on Monday-Friday (9:00-5:30) EST. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on (703) 305-1830. The fax phone 
numbers for the organization where this application or proceeding is assigned are (703) 
746-7239 for regular communications and (703) 746-7238 for After Final 
communications. 

Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist whose telephone number is (703) 305- 
3900. 




Matthew B Smithers 
Primary Examiner 
Art Unit 21 34 



June 19, 2003 



